Logo
| Product Documentation

AD Connect Sync Plus

Firewall Ports

The following ports are required to remain open in the firewall for communication between the AD Connect Sync Plus HUB servers and the Mediation Servers where the AD Connect Sync Plus Agents are installed, and from the Mediation Servers towards the intended source and target Domain Controllers.

Between User and Portal Server

  • 8771 (HTTPS) user login port.

Between HUB and Mediation Servers

  • 8772 (HTTPS) inbound & outbound rule between HUB and mediation agent.

Between Mediation Server(s) and Domain Controllers

  • 636 (LDAPS)
  • 389 (LDAP Optional) only if no secure LDAP option is available at the entity side.
  • 135 (TCP) Microsoft Remote Procedure Call (RPC) service.

AD Connect Sync Plus Database

  • 1433 (Microsoft SQL Server)

The communication matrix for all the AD Connect Sync Plus components is given below:

AD Connect Sync Plus Components Communication
Sr. No ADCS Plus communication Source IP Server Destination IP Server Destination Ports Firewall Rules Service Account Further Details Purpose
1 AD Connect Sync Plus Portal accessible over secure SSL web browsers (and API hub can be accessed by agent server) Mediation Server (Agent) Portal Server • 443 (Public)
• 8771 (Portal IP)
• 8772(API/Hub)		 Inbound and Outbound ports need to be opened • ADCS Plus Health Service
• ADCS Plus Hub Service
• ADCS Plus Misc Tasks Service		 • API hub installed on Control Server communicates with Agent  • To manage users and roles
• To show different reports
• To manage global configurations for all connected agents (AD Entities)
• To provide centralized management
• Audit logs
• API hub serves as an interface for communication between agent and portal
2 AD Connect Sync Plus Mediation Agent Portal Server  Mediation Server (Agent) • 8772 Inbound and Outbound ports need to be opened • ADCS Plus Agent Service • ADCS Plus Agent communicates with API hub installed on Control Server on port 8772 • Agent communicates with API hub without interfering with the ADCS Plus portal communication.
• Includes audit logging, error logs, etc. via the API hub
3 Domain Controller Mediation Server Domain Controller • 389 LDAP
• 636 LDAPS
• 3268 Global Catalog		 Inbound rule for allowing AD server to allow Global Admin and Entity Admin logins • Active Directory Services • For authentication of Global Admin and Entity Admin users.  
4 Database Server Portal Server  Database Server • 1433 Inbound rule for allowing SQL
server port		 • SQL Server Service
• SQL Browser Service		 • For remote connectivity of the SQL server, the SQL Browser service must be in a running state • Serves as the database for the ADCS Plus solution.